Privacy Policy

1. Who we are and what this policy covers

MariaPoS is developed and operated by JAAN Network (PVT) Ltd. ("JAAN Network", "we", "us"), 46 Hudson Road, Colombo, Sri Lanka. This Privacy Policy explains how we handle personal data when you:

• visit this website or submit a trial, demo or contact form;
• install and use the MariaPoS desktop POS software ("the Software");
• use the MariaPoS cloud panel, cloud sync, SMS e-bill or Telegram alert services; and
• purchase or renew a MariaPoS licence.

We process personal data in line with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka and other applicable laws.

2. Your data vs. your customers' data

When you (the shop or business) use MariaPoS to record sales, customers, suppliers and staff, you are the controller of that business data. JAAN Network acts as a processor on your behalf only to provide cloud sync, the cloud panel, SMS e-bills and Telegram alerts. We do not sell, rent or use your business data or your customers' data for our own marketing.

You are responsible for having a lawful basis to collect your customers' details (for example, their phone number for SMS receipts or loyalty points) and for informing them where required.

3. Information we collect

Information you give us

• Trial, demo and contact forms: name, business name, business type, phone / WhatsApp number, email address, city and your message.
• Account and licence: cloud panel username, password (stored hashed), business details and licence plan.
• Payments: order details and payment status. Card payments are processed by our payment gateway (PayHere). We never receive or store your full card number.
• Support: messages, call notes and any screenshots or files you share with us.

Business data processed by the Software

• Products, stock, sales, returns, shifts, till movements, expenses, suppliers, customers (name, phone, credit balance, loyalty points) and user accounts.
• This data is stored locally on your computer in an encrypted database. If cloud sync is enabled, a copy is transmitted over encrypted connections to our cloud servers.

Information collected automatically

• Licence checks: when online, the Software contacts our licence server to confirm your licence status.
• Website: standard server logs (IP address, browser type, pages visited and time) used for security and to keep the site running.

4. How we use information

• to provide, activate and renew your licence and the free trial;
• to sync your data, run the cloud panel and deliver SMS e-bills and Telegram alerts you have enabled;
• to respond to enquiries, book demos and provide technical support;
• to send service notices such as licence expiry reminders, SMS credit balance and important updates;
• to process payments and keep records required by law;
• to protect the security of our services and prevent fraud or misuse; and
• with your consent, to send you news and offers about MariaPoS. You can opt out at any time.

5. Service providers we share data with

We share only the data needed for each service, with providers bound to protect it:

• SMS gateway (SMSLenz): the customer's phone number and bill content, to deliver SMS e-bills.
• Telegram: sale notifications sent to the Telegram account you link in the cloud panel.
• Payment gateway (PayHere): the details needed to process your licence or SMS credit payment.
• Hosting providers: to store cloud panel and synced data.

We may also disclose information if required by Sri Lankan law, a court order or a lawful request by a public authority, or to protect our rights and users' safety. We do not sell personal data.

6. How we protect data

• encrypted local database on the POS computer;
• encrypted (HTTPS) connections for cloud sync, licence checks and the cloud panel;
• role-based access, per-user permissions, manager PIN overrides and an audit log in the Software;
• hashed passwords and restricted staff access to our servers.

7. How long we keep data

Business data synced to the cloud is kept while your licence is active. After your licence ends we keep it for up to 12 months so you can renew without losing data, unless you ask us to delete it sooner. Local data on your computer stays under your control.

Enquiry and trial form details are kept for up to 24 months. Billing and payment records are kept for the period required by Sri Lankan tax and accounting laws.

8. Your rights

Under the Personal Data Protection Act, you have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request erasure of your data, subject to legal record-keeping obligations;
• withdraw consent to marketing at any time; and
• object to or request review of processing.

Email mariaPOS@gmail.com to make a request. We will respond within the time limits required by law. If your customers contact us about data you hold, we will refer them to you and assist you in responding.

9. Cookies

This website uses only the cookies and browser storage needed for it to function. We do not use advertising cookies. If we add analytics in future, we will update this policy.

10. Children

MariaPoS is a business product and is not directed at children under 18.

11. International transfers

Some service providers (such as Telegram or hosting providers) may process data outside Sri Lanka. Where this happens, we take reasonable steps to ensure the data receives adequate protection as required by law.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date shows the latest version. Significant changes will be announced on this website or inside the Software. See also our Terms & Conditions and Refund Policy.